Enter your email and we'll share the insights. Hitting submit opts you into our mailing list.
Security Engineers at high-growth companies earn $115K–$185K. Median: $143K. Based on 460 public job postings (2025–2026). US DOL certified wage filings (FY2026): $151K median.
Median: $143K · Based on 460 public job postings · Updated June 29, 2026
A security engineer designs, builds, and maintains the security controls, tooling, and processes that protect a company's systems and data. At a startup, security engineers often own the entire security function: application security, cloud security, identity management, compliance programs (SOC 2, ISO 27001), and incident response. Security has moved from a box-checking compliance exercise to a product differentiator — especially for companies selling to enterprise customers.
Series A through Series B, once enterprise deals are requiring security questionnaires and SOC 2 certification, or when you handle sensitive customer data that creates real liability if breached. Security engineers who join at Series A can build security right into the architecture; joining at Series C means retrofitting security into systems designed without it — significantly harder and more expensive.
Based on our database of 512 real postings, a Security Engineer typically earns a median salary of $204K. Salaries for this role generally range from $172K to $232K, reflecting variations in experience, location, and company size. We ensure our clients are competitive with these figures to attract top talent.
Hiring a Security Engineer can be a competitive process, with the industry average often ranging from 45 to 60 days. Through our specialized recruitment process and extensive network, we typically reduce this timeframe significantly. Our average time to placement for a Security Engineer is just 29 days, connecting you with qualified candidates faster.
When hiring a Security Engineer, prioritize candidates with a strong foundation in security principles, threat modeling, and incident response. Look for practical experience with various security tools and technologies, alongside a proactive problem-solving mindset. We advise clients to seek individuals who can not only identify vulnerabilities but also design and implement robust defenses.
Effective assessment involves a combination of technical interviews, practical exercises, and behavioral questions. We recommend scenario-based questions to gauge their problem-solving abilities under pressure and their understanding of real-world security challenges. Our process includes deep dives into their past projects to understand their contributions and decision-making processes.
The Security Engineer role has seen a significant shift towards remote work, especially in recent years. While some organizations prefer in-person or hybrid models for specific operational reasons, many companies successfully employ remote security teams. We find that offering flexibility can greatly expand the talent pool, allowing access to a wider range of skilled professionals across different geographies.
San Francisco
New York
Based on companies with 3+ active postings. Median of publicly advertised salary range.
Typical experience required: 5–6 years.
Security Engineers are security engineers and analysts who protect infrastructure, data, and applications. This benchmark reflects Mid-level base compensation at high-growth and AI-native companies.
For corroboration, U.S. Department of Labor certified wage filings (FY2026) show a median of $151K for Security Engineer roles, ranging $123K–$178K, across 163 filings. This is reported separately from — never blended with — the job-posting median above.
What is the average Security Engineer salary at an AI startup?
The median pay is $143K, with a typical range of $115K–$185K, based on 460 public job postings collected in 2025–2026.
How does Security Engineer pay compare in San Francisco vs. remote?
San Francisco roles pay a median of $245K, while fully-remote roles pay $165K.
Where does this salary data come from?
It is aggregated from public job postings on company career pages — no private placement or client data. We require a minimum of 15 postings per role.
Figures are the midpoint of each posting's advertised USD salary range, aggregated from 460 public job postings (2025–2026). The range shown is the 25th–75th percentile; the median is the 50th percentile. Equity is separate and not included; where a posting's range reflects on-target earnings (OTE) for commission roles, that is included in the midpoint. Roles require at least 15 postings to be published. Last refreshed June 29, 2026.
Hiring Security Engineers? RFS recruiters specialize in Security placements at AI-native and high-growth startups. Talk to an RFS recruiter →
Are you a Security Engineer? See open Security Engineer roles →
Tell us about your open roles and we'll start sourcing within 48 hours.
